$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c2f8e52-83f3-4bf3-905e-237615aeedbc.roa File: 2c2f8e52-83f3-4bf3-905e-237615aeedbc.roa (raw, json) Hash identifier: OaDkIaqKG4YOChgJH/wHr1VHR5AqrGQkCH0HdzBd6Yc= Subject key identifier: 7E:29:D7:C8:EB:DC:D5:0E:27:2A:C0:03:44:84:13:0B:84:AC:2A:D2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 59A76C88E28F7486FBCF55FCD54C8CDE6A2E5998 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c2f8e52-83f3-4bf3-905e-237615aeedbc.roa Signing time: Wed 06 Nov 2024 00:00:00 +0000 ROA not before: Wed 06 Nov 2024 00:00:00 +0000 ROA not after: Wed 11 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 204.45.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:a7:6c:88:e2:8f:74:86:fb:cf:55:fc:d5:4c:8c:de:6a:2e:59:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 6 00:00:00 2024 GMT Not After : Dec 11 23:59:59 2024 GMT Subject: serialNumber=7b719de45293936b17961c511d34b3d5b336b465b4d6895cc5e4a53e56e8cab5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:85:52:1d:8f:b1:96:81:15:3e:56:6a:ac:f0: b8:3f:4d:a8:36:4c:69:1a:9f:05:86:9c:c9:c4:db: 62:c3:4f:d4:ae:e7:57:4e:f5:56:8c:6d:2c:11:dd: 4c:50:24:97:4d:e0:7d:25:78:af:42:44:f7:e4:38: 0e:e3:55:60:46:6d:e9:8a:3a:00:cb:db:55:64:b7: 3a:ea:a0:b8:15:e9:63:9e:d4:9e:21:2c:ac:a7:c6: 2a:9b:11:45:1d:3d:3d:24:b5:41:4e:3e:ef:97:72: 16:21:10:3e:e3:17:0d:71:7c:eb:b1:0b:78:c2:94: dd:ea:cf:ab:97:d8:f0:24:45:3c:e5:d8:7a:8b:bf: ab:7c:a7:1e:f5:71:fc:d1:e7:6c:c8:ff:8b:e1:9e: ce:e8:e9:53:8a:96:53:36:09:b2:78:4f:df:99:f1: bc:3b:c0:b4:c1:72:1e:d5:4d:75:66:3e:cf:43:bf: e1:e3:10:63:73:c3:62:88:ac:02:24:a6:bb:f7:f1: ab:d9:e5:da:69:26:d6:6c:82:ee:4e:a2:b2:66:15: c5:15:1a:5f:0d:c7:e3:9c:7f:6e:a4:f1:d8:f3:d8: a4:24:7c:7c:59:2c:e9:1b:bf:56:b7:1e:b2:e0:78: e2:3c:93:4d:17:58:0d:bf:0a:3b:39:93:53:8e:dc: 54:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:29:D7:C8:EB:DC:D5:0E:27:2A:C0:03:44:84:13:0B:84:AC:2A:D2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c2f8e52-83f3-4bf3-905e-237615aeedbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.45.0.0/16 Signature Algorithm: sha256WithRSAEncryption bd:29:d5:ce:af:b1:47:02:0f:d8:1a:20:dc:85:1f:40:c2:c7: b7:9a:fb:9e:f8:2c:41:4b:63:60:48:67:b9:d2:31:42:83:76: 9d:45:04:4d:ab:2a:59:69:65:a4:ad:92:e1:18:91:bf:86:6b: 3b:85:29:c5:b7:84:15:b9:e4:96:23:af:44:de:01:82:eb:4d: 48:4a:65:86:b3:ac:be:85:78:d0:3e:9f:07:51:f3:dc:61:46: ab:47:cf:d0:40:b0:0b:53:2f:86:f5:1f:a9:64:e4:54:19:cf: 38:47:cb:e0:79:ce:88:bc:f5:e1:fe:fa:b8:ba:45:98:0d:c1: 97:5c:cf:1b:61:55:0c:ea:2f:d3:c3:ef:52:b4:20:be:38:d4: 2f:6d:d9:b3:82:41:d2:0e:f1:e6:99:dc:ce:7d:c4:ed:84:86: 91:da:65:cb:a6:ff:f6:26:c0:2c:8d:49:34:c2:55:36:bf:dc: f3:bb:a7:ea:11:9e:48:61:28:01:ae:f9:92:c8:1e:93:de:f7: 62:1b:b8:f3:53:70:b6:64:de:76:4b:9e:00:e2:d5:95:89:d7: 84:cf:9f:eb:f3:ab:7c:fb:1a:02:ff:78:28:6d:b9:68:8a:9c: aa:d5:c1:37:a2:50:e4:a2:8e:2c:3e:ef:24:af:02:2d:18:46: 92:b8:04:58 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUWadsiOKPdIb7z1X81UyM3mouWZgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA2MDAwMDAwWhcNMjQxMjExMjM1OTU5 WjB6MUkwRwYDVQQFE0A3YjcxOWRlNDUyOTM5MzZiMTc5NjFjNTExZDM0YjNkNWIz MzZiNDY1YjRkNjg5NWNjNWU0YTUzZTU2ZThjYWI1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDhVIdj7GWgRU+Vmqs8Lg/Tag2TGkanwWGnMnE22LDT9Su 51dO9VaMbSwR3UxQJJdN4H0leK9CRPfkOA7jVWBGbemKOgDL21VktzrqoLgV6WOe 1J4hLKynxiqbEUUdPT0ktUFOPu+XchYhED7jFw1xfOuxC3jClN3qz6uX2PAkRTzl 2HqLv6t8px71cfzR52zI/4vhns7o6VOKllM2CbJ4T9+Z8bw7wLTBch7VTXVmPs9D v+HjEGNzw2KIrAIkprv38avZ5dppJtZsgu5OorJmFcUVGl8Nx+Ocf26k8djz2KQk fHxZLOkbv1a3HrLgeOI8k00XWA2/Cjs5k1OO3FSzAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUfinXyOvc1Q4nKsADRIQTC4SsKtIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJjMmY4ZTUyLTgzZjMtNGJmMy05MDVlLTIzNzYxNWFlZWRiYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwDMLTANBgkqhkiG9w0BAQsFAAOCAQEAvSnVzq+xRwIP2Bog3IUfQMLHt5r7 nvgsQUtjYEhnudIxQoN2nUUETasqWWllpK2S4RiRv4ZrO4UpxbeEFbnkliOvRN4B gutNSEplhrOsvoV40D6fB1Hz3GFGq0fP0ECwC1MvhvUfqWTkVBnPOEfL4HnOiLz1 4f76uLpFmA3Bl1zPG2FVDOov08PvUrQgvjjUL23Zs4JB0g7x5pnczn3E7YSGkdpl y6b/9ibALI1JNMJVNr/c87un6hGeSGEoAa75ksgek973Yhu481NwtmTedkueAOLV lYnXhM+f6/OrfPsaAv94KG25aIqcqtXBN6JQ5KKOLD7vJK8CLRhGkrgEWA== -----END CERTIFICATE-----Generated at Fri Nov 22 02:07:50 2024 by rpki-client on console-fra.rpki-client.org